Asset (Organizational Asset) (Glossary)

Anything that has value to an organization, including, but not limited to, another organization, person, computing device, IT system, IT network, IT circuit, software (both an installed instance and a physical instance), virtual computing platform (common in cloud and virtualized computing), and related hardware (e.g., locks, cabinets, keyboards) [NISTIR 7693, NISTIR 7694].

Understanding assets is critical to identifying the CMMC Assessment Scope; for more information see CMMC Assessment Scope – Level 2.